Cross site scripting

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label...

CVE-2013-2177

Cross-site scripting XSS vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via an entity bundle label...

[PenQ] The Security Testing Browser Bundle

PenQ is an open source Linux based penetration testing browser bundle we built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more. PenQ is configured ...

SuSE 10 Security Update : compat-curl2 (ZYPP Patch Number 8557)

This update of compat-curl2 fixes several security issues. - fixes for the cookie domain tailmatch vulnerability. bnc814655 - updated curl CA-Cert Bundle. bnc810010 - fixes for a potential BEAST attack bnc742306 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this...

SuSE 10 Security Update : curl, curl (ZYPP Patch Number 8550)

This update fixes the cookie domain tailmatch vulnerability in curl. CVE-2013-1944 has been assigned to this issue. Also the CA-Cert Bundle has been updated to the current state. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

Russian Underground Cybercrime market offering sophisticated services

Security firm Trend Micro recent analyses the Russian crimeware markets and has found that malware tools and services range from one-time packages which cost just pennies to sophisticated packages and services which cost purchasers thousands of dollars per month. If you want to buy a botnet it wi...

SA-CONTRIB-2012-046 - Bundle Copy - Arbitrary Code execution

CVE: CVE-2012-2073 Bundle copy is a replacement for the Content copy module which lives in the CCK project for Drupal 6. Besides the ability to import and export content types, taxonomy and user entities are also supported. Field groups can be exported easily as well. The module doesn't...

Tor Browser Bundle for Linux (2.2.35-8) "EVIL bug"

"There is an EVIL bug in at least the Linux 2.2.35-8 Tor Browser Bundle start-tor-browser script. It will log things like domain names to a file in the root of the browser bundle." https://trac.torproject.org/projects/tor/ticket/5417 Ticket 5417 new defect RelativeLink.sh in Tor browser bundle ha...

ca_root_nss -- extraction of explicitly-untrusted certificates into trust bundle

Matthias Andree reports that the ca-bundle.pl used in older versions of the carootnss FreeBSD port before 3.12.11 did not take the Mozilla/NSS/CKBI untrusted markers into account and would add certificates to the trust bundle that were marked unsafe by Mozilla...

DSA-2299-1 ca-certificates - untrusted root CA

Bulletin has no description...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 Bundle 17 allows remote authenticated users to affect confidentiality via unknown vectors related to ePerformance...

CVE-2011-0850

Unspecified vulnerability in Oracle PeopleSoft Enterprise CRM 8.9 Bundle 41 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Order Capture...

CVE-2011-0858

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Talent Acquisition Manager...

CVE-2011-0828

Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle 13 allows remote attackers to affect integrity via unknown vectors related to Application Portal...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise 8.8 Bundle 13 allows remote attackers to affect integrity via unknown vectors related to Application Portal...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to ePerformance...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration...

CVE-2011-0828

CVE-2011-0828 affects Oracle PeopleSoft Enterprise 8.8 Bundle #13. The description states an unspecified vulnerability allowing remote attackers to affect integrity via unknown vectors related to the Application Portal. CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:P/I:P/A:N). No exploitation details, ...

CVE-2011-0857

Technical details about CVE-2011-0857 are not publicly provided in the supplied documents; information on affected components, exploit vectors, and fixes is not available here. Monitor for updates.

Mandriva Linux Security Advisory : kdelibs4 (MDVSA-2011:071)

A vulnerability has been found and corrected in kdelibs4 : kio/kio/tcpslavebase.cpp in KDE KSSL in kdelibs before 4.6.1 does not properly verify that the server hostname matches the domain name of the subject of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL...